
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json)
Hash identifier: /M66JePv0VxGz5trS4NcEg1psQS+onSWHsgbb81Bxxg=
Subject key identifier: B8:78:F9:FA:6F:AD:66:BD:9E:1D:0D:FD:49:8E:8E:BD:38:C8:73:1C
Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
Manifest number: 02B0
Signing time: Sun 19 Apr 2026 01:33:42 +0000
Manifest this update: Sun 19 Apr 2026 01:33:41 +0000
Manifest next update: Sun 26 Apr 2026 01:33:41 +0000
Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: CXbkSgoC0QWD4Bh/X4CHMZ2Idi13Xzvxm79C/QUHtas=)
2: 5F5A375CFF0C11F0AEE33AB880EE528E.roa (hash: jKaERdadgN/bTNsY3N2ri9io7PkqOZ7TSU8weedDHCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 01:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Validity
Not Before: Apr 19 01:33:41 2026 GMT
Not After : Apr 26 01:33:41 2026 GMT
Subject: CN=69e430f6-201f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:33:8a:c7:82:4f:e9:67:16:67:7c:f6:57:
da:94:da:fa:7f:7f:40:77:59:c1:8c:e2:ce:8a:19:
11:ee:e4:e2:ee:c0:5e:78:47:68:cd:5f:c2:01:35:
ee:34:33:7a:39:42:07:10:f8:e7:84:d2:69:09:f8:
87:85:03:ed:a3:c4:7e:8d:60:85:15:40:a3:87:b7:
3b:ec:1e:0a:35:75:b1:e2:d3:70:49:a1:0e:1f:ca:
70:35:41:66:f6:a3:5b:62:a5:f4:95:ea:14:02:37:
86:b4:c4:f9:e7:cc:40:08:1f:6b:e5:37:b5:06:0f:
e5:8a:5e:ec:5b:39:d7:3f:f6:d7:ac:e9:2f:f0:7b:
6b:92:d5:ea:93:f7:5a:a4:ff:03:4c:93:c2:4d:a2:
78:e2:a7:b1:6a:96:af:bd:3e:2e:01:49:7e:e6:30:
82:df:f9:28:6c:5e:93:0c:46:11:e4:ac:4f:3f:cc:
0e:53:28:0d:ed:5f:c8:0a:01:8d:4f:6a:69:00:7d:
2e:f9:20:f0:8a:13:51:7c:93:c9:e8:4f:f9:2a:1b:
af:43:12:b1:28:e0:27:98:a9:63:ca:e6:1d:f3:51:
0c:2f:33:11:ac:4a:e6:f0:67:8e:04:b9:64:f5:4d:
d7:70:b5:26:ba:37:59:37:e2:37:52:90:c3:db:28:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:F9:FA:6F:AD:66:BD:9E:1D:0D:FD:49:8E:8E:BD:38:C8:73:1C
X509v3 Authority Key Identifier:
keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:51:be:81:c1:9f:2e:2d:66:fc:e5:c5:15:3d:6d:b6:e9:00:
77:29:b2:2d:b7:ca:fd:62:dc:c2:31:e7:f3:9f:34:03:a7:98:
f2:5e:61:91:31:e5:7f:98:3c:26:a9:67:a1:ac:e0:5a:a5:de:
da:2d:1b:25:34:50:a7:f9:7a:a2:71:d8:31:27:14:c3:39:ff:
4d:8d:50:5a:3a:cb:b6:ce:d5:bf:9c:2a:5b:8d:06:4a:bd:57:
25:f4:68:70:b4:f0:04:60:4c:8e:ff:6a:c1:72:2d:0f:39:3c:
88:4f:c2:53:2b:2c:e2:eb:09:12:ca:56:04:20:0b:e5:e7:e9:
1f:b0:84:04:ed:83:f9:24:20:46:aa:53:b1:7d:91:a6:5f:30:
78:15:a1:14:9f:f1:9f:39:d3:f6:54:7c:05:53:f7:64:0d:12:
6d:94:ec:65:d6:37:42:51:6a:ff:17:f5:e1:8a:3b:35:e2:9f:
e4:67:4d:41:63:97:10:5b:9c:24:8e:62:7c:6c:af:2b:d1:81:
d4:a5:d4:68:22:3e:68:fd:72:6f:96:56:18:d1:79:1b:67:d3:
82:0d:79:eb:7e:ec:cd:29:12:37:1d:06:4d:87:82:5e:60:b9:
12:c6:16:f0:44:6a:65:42:f3:6d:30:3f:5f:b1:3d:c5:c4:cf:
29:bd:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:06 2026 by rpki-client